This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200187.roa
File: AS200187.roa (raw, json)
Hash identifier: EAjZOner3ZomVyPWisX9Z4rx258o9jkeX+FJ5okHR+Y=
Subject key identifier: E3:B9:AA:4B:9C:AE:FA:70:93:BF:97:13:32:9C:2A:6C:F3:99:CA:78
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7163B056FDA18D965CB0F6429FB45881021A1689
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200187.roa
Signing time: Wed 26 Nov 2025 14:51:29 +0000
ROA not before: Wed 26 Nov 2025 14:46:29 +0000
ROA not after: Wed 25 Nov 2026 14:51:29 +0000
asID: 200187
IP address blocks: 82.26.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:63:b0:56:fd:a1:8d:96:5c:b0:f6:42:9f:b4:58:81:02:1a:16:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 26 14:46:29 2025 GMT
Not After : Nov 25 14:51:29 2026 GMT
Subject: CN=E3B9AA4B9CAEFA7093BF9713329C2A6CF399CA78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:d5:0a:d1:2f:87:53:1d:bc:33:a3:c1:e1:
f5:37:d1:5f:55:33:f8:83:13:ad:04:6f:f6:23:20:
a6:37:27:d4:d8:70:37:5a:bb:e3:33:d4:4e:3e:8b:
dd:ab:5e:61:d3:9a:e9:88:b5:3d:c4:73:1c:a7:b2:
2d:87:e1:0f:47:a4:72:50:45:4a:af:c5:65:9c:52:
26:94:cf:23:a2:90:23:5c:0d:d2:7f:0a:c0:0f:a5:
7b:5f:7f:b0:f8:2f:e1:99:9d:fa:0e:ec:27:80:28:
9d:37:df:6f:e2:6b:6d:b0:ee:f4:ed:3e:d2:32:b6:
57:ac:ce:72:a4:38:85:79:0b:95:ce:ab:f1:e9:fd:
79:e4:1c:98:f0:6d:7c:f9:3b:49:87:01:26:c6:51:
28:69:f9:9c:12:ca:a1:d9:9b:e8:f5:19:d1:4c:67:
43:27:b2:cd:dd:65:63:00:2c:cd:a7:1b:14:7f:11:
d4:a8:c8:da:58:89:90:60:a0:4c:6e:cf:80:03:8c:
5d:8e:cd:88:98:14:6e:24:0c:a3:fc:cc:9c:43:c0:
17:00:28:7e:6b:82:0e:90:ac:d3:aa:13:6b:c9:57:
fe:ce:5d:92:07:ee:dd:94:d1:00:42:73:ff:dc:01:
5f:85:46:e7:ef:03:89:1c:0e:ec:d5:bc:df:85:a7:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B9:AA:4B:9C:AE:FA:70:93:BF:97:13:32:9C:2A:6C:F3:99:CA:78
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200187.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:02:97:e4:aa:a5:61:80:95:0d:45:55:92:9b:d3:f5:07:00:
26:a9:ca:fe:6e:54:02:2c:9f:cf:97:18:b9:cb:0e:f1:c3:a4:
a1:55:2a:37:4e:d5:66:c6:0a:1b:ec:6b:7a:93:fb:c3:9f:24:
8e:8e:69:15:58:4a:53:d2:04:a3:6d:ac:aa:a1:3a:b0:e9:20:
42:aa:c3:53:9c:5f:75:1d:1c:ae:35:83:57:e6:2b:d8:ac:ce:
c7:9a:93:cc:81:2f:7d:2d:b1:df:15:3f:b6:6a:b1:5c:33:23:
1c:de:e2:21:d3:d6:80:d8:a4:e2:01:89:9f:5a:50:41:58:b4:
8a:3c:2b:69:b5:b6:1c:98:3a:31:2f:48:4b:fe:56:3c:a1:47:
5a:35:b6:5d:c6:37:b5:fa:e8:9c:c3:ee:44:c2:41:ef:47:76:
42:33:52:73:90:9a:5d:a3:b1:a3:98:0a:11:c1:31:95:8b:a2:
49:bc:ec:30:22:f2:33:e8:f6:21:14:d4:81:d7:80:ea:6e:b1:
52:d1:bd:d0:0c:12:18:a5:62:bc:b8:80:2e:39:d2:5d:68:0b:
2c:9b:14:56:f3:7c:17:39:92:2d:45:6f:4a:90:9a:dc:fb:88:
09:86:aa:a0:85:c8:eb:ff:22:ce:55:71:b0:f5:93:fa:72:12:
76:7e:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 06:01:44 2025 by rpki-client